Vulnerability · Published Oct 2, 2026 · Assigned by GV
CVE-2026-103098GV-Eye Sensitive information exposure in URL query parameter Vulnerability
High 7.5
In plain English
A high-severity security flaw in GV-Eye from GeoVision Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 94.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GeoVision Inc. | GV-Eye | V3.6.0 |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.geovision.com.tw/cyber_security.php vendor-advisory